$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa File: dda697e5-795b-3c5b-960b-01f1086c0e4f.roa (raw, json) Hash identifier: sMI0cAa7uVUXbjUuJxrUQzMtBVCBFLZVK32UEA+R0lg= Subject key identifier: 60:63:06:6E:AD:CC:55:77:A6:F2:BB:52:B8:0D:F5:71:57:85:9F:AD Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC0DE53B0A608EF2157C0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11537 IP address blocks: 163.253.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c0:de:53:b0:a6:08:ef:21:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=34e8eecf-94cd-40f0-8aa5-ae2f98b31dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:d2:1d:4f:36:8b:0b:9f:f4:97:81:10:12: a6:dc:71:ff:37:13:1d:77:aa:a9:29:c8:72:a5:95: b9:28:72:d4:62:d5:91:0f:ec:61:e7:76:7b:d6:8e: 4c:e4:f7:47:11:a2:eb:09:e3:44:99:8b:c8:48:fc: a6:de:aa:b3:12:0f:88:90:97:81:87:6d:e8:18:a4: 45:3d:cd:b9:eb:7a:0a:a1:2f:13:0e:be:c2:05:22: 19:b8:c2:e1:29:39:4e:91:a3:9f:6b:08:e3:ea:4d: 11:1c:05:1c:96:c7:7f:d6:f1:3a:fe:0d:d3:d3:34: ba:03:9d:77:03:40:28:1e:c3:5c:14:2e:8b:78:87: 28:b1:8b:79:db:db:37:fe:f3:1a:c5:ed:61:c1:2d: 54:8f:6f:36:40:da:08:bc:0b:4b:d0:89:29:33:40: 78:21:29:10:9f:65:2f:1d:f4:bc:95:a3:d3:ae:84: ce:c4:c6:8d:eb:13:54:d3:0c:92:36:8f:2a:49:53: 58:7b:64:c7:03:f6:a0:f2:dc:11:28:42:a2:69:98: 7f:44:4a:13:46:05:85:79:a1:f1:f8:32:60:a2:dc: d3:5f:89:34:9f:88:b9:8c:cf:5e:ad:6f:ee:e4:8c: 83:9b:ec:e4:03:28:0c:da:18:b2:1a:5b:ee:95:51: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:63:06:6E:AD:CC:55:77:A6:F2:BB:52:B8:0D:F5:71:57:85:9F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:97:4c:84:37:3b:b8:5b:f3:98:22:dc:86:5c:2a:ba:c0:f4: c7:da:e5:2a:34:fd:23:3c:05:c6:fc:26:95:49:9c:22:8a:bd: d4:7a:fe:a5:c4:10:fe:0f:bf:7a:8d:69:05:04:91:13:77:f1: d1:43:62:18:aa:19:39:bb:41:65:89:ab:c6:ec:70:3b:c9:7c: a0:34:4e:b5:5a:05:00:c3:92:ed:b1:b1:d7:e9:c8:dc:84:4c: 0d:7e:ea:4d:2a:ae:ef:a7:1c:c3:9d:cb:79:12:11:5a:04:97: b3:58:f5:dd:48:c1:3f:bb:a1:e4:b4:2c:fa:04:b6:c4:f2:d7: 64:68:89:f3:4a:fc:54:bc:6e:1e:1f:de:de:12:93:6d:98:fa: 2a:f8:78:46:b1:8d:17:7d:bf:a8:52:99:16:6e:70:f0:d7:46: 40:0b:26:64:bd:a5:25:2b:e8:72:2c:26:47:83:cc:85:d9:78: 99:ba:57:74:5b:2e:39:cc:70:02:62:e4:b4:20:ac:42:43:91: 52:43:75:39:5e:b7:b3:f3:d3:4f:8c:2e:93:55:11:05:c9:ab: a2:ee:c9:ab:89:93:a6:47:ce:8f:82:cb:0c:fb:14:5d:98:50: a7:ec:a2:43:89:f7:ed:09:19:5e:0f:f0:fa:a5:ac:a6:2a:26: df:1f:3c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMDeU7CmCO8hV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MzRlOGVlY2YtOTRjZC00MGYwLThhYTUtYWUyZjk4YjMxZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncLSHU82iwuf9JeBEBKm3HH/NxMdd6qpKchy pZW5KHLUYtWRD+xh53Z71o5M5PdHEaLrCeNEmYvISPym3qqzEg+IkJeBh23oGKRF Pc2563oKoS8TDr7CBSIZuMLhKTlOkaOfawjj6k0RHAUclsd/1vE6/g3T0zS6A513 A0AoHsNcFC6LeIcosYt529s3/vMaxe1hwS1Uj282QNoIvAtL0IkpM0B4ISkQn2Uv HfS8laPTroTOxMaN6xNU0wySNo8qSVNYe2THA/ag8twRKEKiaZh/REoTRgWFeaHx +DJgotzTX4k0n4i5jM9erW/u5IyDm+zkAygM2hiyGlvulVEtmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBjBm6tzFV3pvK7UrgN9XFXhZ+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGRhNjk3ZTUtNzk1Yi0z YzViLTk2MGItMDFmMTA4NmMwZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCXTIQ3O7hb85gi3IZcKrrA9Mfa5So0/SM8Bcb8JpVJnCKKvdR6/qXE EP4Pv3qNaQUEkRN38dFDYhiqGTm7QWWJq8bscDvJfKA0TrVaBQDDku2xsdfpyNyE TA1+6k0qru+nHMOdy3kSEVoEl7NY9d1IwT+7oeS0LPoEtsTy12RoifNK/FS8bh4f 3t4Sk22Y+ir4eEaxjRd9v6hSmRZucPDXRkALJmS9pSUr6HIsJkeDzIXZeJm6V3Rb LjnMcAJi5LQgrEJDkVJDdTlet7Pz00+MLpNVEQXJq6LuyauJk6ZHzo+Cywz7FF2Y UKfsokOJ9+0JGV4P8PqlrKYqJt8fPPc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:42 2025 by rpki-client